Skip to main content
CVE-2026-98710VulnerabilityPublished Updated

Microsoft · wifi: iwlegacy: 3945: free EEPROM data on remove

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98710· Low

Not known to be exploited · fixed in f8ebe286394c0bbb4a6dbacb182a34ab6376922d : update Microsoft when convenient.

Data as of 7 Nov 2026, 12:35 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in f8ebe286394c0bbb4a6dbacb182a34ab6376922d, cd8f8f45d81aac384311701d7ffe26567af2e783, ab7bee2cd55f665cb29fa0ace2ec14020e0a452e +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73, < f8ebe286394c0bbb4a6dbacb182a34ab6376922d
Fixed in
  • f8ebe286394c0bbb4a6dbacb182a34ab6376922d
LinuxLinuxAffected
  • ≥ 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73, < cd8f8f45d81aac384311701d7ffe26567af2e783
Fixed in
  • cd8f8f45d81aac384311701d7ffe26567af2e783
LinuxLinuxAffected
  • ≥ 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73, < ab7bee2cd55f665cb29fa0ace2ec14020e0a452e
Fixed in
  • ab7bee2cd55f665cb29fa0ace2ec14020e0a452e
LinuxLinuxAffected
  • ≥ 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73, < a17d3fbca1731ae84c03a3dea0970f62f19757fb
Fixed in
  • a17d3fbca1731ae84c03a3dea0970f62f19757fb
LinuxLinuxAffected
  • ≥ 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73, < 52990dd317f76c1baa3665e3b1513cf3d4b48f5e
Fixed in
  • 52990dd317f76c1baa3665e3b1513cf3d4b48f5e
LinuxLinuxAffected
  • ≥ 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73, < 89f9d6186dc7429f38132635526e28549c913c0b
Fixed in
  • 89f9d6186dc7429f38132635526e28549c913c0b

Description

CVE-2026-98710 is a vulnerability related to the iwlegacy driver component for wifi, specifically involving the 3945 device where EEPROM data is freed upon device removal. The advisory references Microsoft products version 3.0 and 4.0 as affected. No detailed technical impact or exploitation information is provided.

References

Community reviews

Loading reviews…